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DETAILED ACTION 
Claim Rejections - 35 USC § 103 

1. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

2. Claims 1-79 are rejected under 35 U.S.C. 103(a) as being unpatentable over Whitehouse 
(U.S. Patent No. 6,005,945 {applicant submitted IDS) in view of White (U.S. Patent No 
6,065,117). 

3. As per claim 1, Whitehouse teaches a scalable on-line system for printing value bearing 
items (VBI) {electronic distribution of postage, 100) comprising a client system {host system, fig 
3) for interfacing with one or more users {customer, 104) and a scalable server system {postal 
service, 180) capable of communicating with the client system over a communication network 
{network, fig 3) (see figs 3, 4, column 7 line 54-8 line 11) comprising a database {secure central 
computer 102, memory 154) remote from the users including information about the users {see fig 

4. column 8 lines 23-29, 54-58, 9 line 15-19), and a plurality of security device transaction data 
{transaction log) stored in the database for ensuring authenticity of the one or more users, 
wherein each security device transaction data can be processed in the server system in a stateless 
manner {see figs 3, 4, column 8 line 59-65, 9 line 12-50), Whitehouse fails to teach a stateless 
cryptographic module for authenticating the one or more users. However, White teaches a 
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system comprises a stateless cryptographic module for authenticating the one or more users (see 
abstract, column 2 lines 18-54, 5 line 63-7 line 18). Therefore, it would have been obvious to 
one of ordinary skill in the art the invention was made to modify Whitehouse's system to include 
White's a stateless cryptographic module for authenticating the one or more users because this 
would have enhance the security of the system. 

4. As per claim 2, Whitehouse teaches a system wherein each security device transaction 
data is related to a user (see column 9 lines 12-20). 

5. As per claim 3, Whitehouse teaches a system wherein the security device transaction data 
related to a user is loaded into the cryptographic module when the user requests to operate on a 
value bearing item (see column 9 lines 45-50). 

6. As per claim 4, Whitehouse teaches a system wherein the security device transaction data 
related to a user is updated and returned to the database (see column 9 line 51-63, 12 line 53-56). 

7. As per claim 5, Whitehouse teaches a system further comprising one module is capable 
of processing any of the plurality of security device transaction data (see column 9 line 51-63). 

8. As per claim 6, Whitehouse teaches a system wherein a user can be authenticated using 
any of the cryptographic modules (see column 9 line 51-63). 
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9. As per claim 7, Whitehouse teaches a system further comprising computer executable 
code for load-balancing to route user requests to the at least one more cryptographic module (see 
column 19 line 35-20 line 8). 

10. As per claim 8, Whitehouse teaches a system further comprising computer executable 
code for load-balancing to distribute traffic among the multiple cryptographic modules (see 
column 19 line 35-20 line 8). 

11. As per claim 9, Whitehouse teaches a system wherein the cryptographic module is 
capable of authenticating any of the one or more users (see column 19 line 35-20 line 8). 

12. As per claim 10, Whitehouse teaches a system wherein the database is partitioned across 
a plurality of physical databases (see fig 7). 

13. As per claim 11, Whitehouse teaches a system wherein the cryptographic module 
performs cryptographic function on a transaction related to the database (see fig 7). 

14. As per claim 12, Whitehouse teaches a system further comprising computer executable 
code for password authentication to prevent unauthorized access to the database (see column 10 
line 45-60). 
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15. As per claim 13, Whitehouse teaches a system wherein the database stores a first set of 
one or more last database transactions and the cryptographic module stores a second set of one or 
more last database transactions for comparison with the first set of one or more last database 
transactions stored in the database to verify each database transaction {see column 8 line 63-9 
line 12). 

16. As per claim 14, Whitehouse teaches a system wherein the cryptographic module 
prevents further database transactions if the second set of one or more last transaction stored in 
the cryptographic module does not compare with the first set of one or more last transaction 
stored in the database {see column 9 lines 1-12). 

17. As per claim 15, Whitehouse teaches a system wherein the cryptographic module 
includes a data validation subsystem for allowing the module to verify that data is up to date and 
an auto-recovery subsystem for automatically re-synchronize the module with the data {see 
column 9 line 32-50). 

18. As per claim 16, Whitehouse teaches a system wherein the cryptographic module 
includes a computer executable code for preventing unauthorized modification of data {see 
column 15 line 1-17). 
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19. As per claim 17, Whitehouse teaches a system wherein the cryptographic module 
includes a computer executable code for ensuring the proper operation of cryptographic security 
and VBI related meter functions {see column 16 line 45-67), 

20. As per claim 18, Whitehouse teaches a system wherein the cryptographic module 
includes a computer executable code for supporting multiple concurrent users {see fig 7). 

21. As per claim 19, Whitehouse teaches a system wherein the database includes one or more 
indicium data elements, data for account maintenance, and data for revenue protection {see fig 
4). 

22. As per claim 20 and 21, Whitehouse teaches a system wherein the database includes 
virtual meter information and a descending register data {see column 10 line 50-11 line 26, 14 
lines 25-36). 

23. As per claims 22 and 23, Whitehouse teaches a system wherein the value bearing item is 
a mail piece that comprises a digital signature {see column 7 lines 1-5, 8 line 47-51 and 11 lines 
27-29. 

24. As per claim 24, Whitehouse teaches a system wherein the cryptographic module 
performs cryptographic function on validation information according to a user request for 
printing a VBI {see column 9 lines 12-30). 
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25. As per claim 25, Whitehouse teaches a system wherein the cryptographic module 
generates data sufficient to print a postal indicium in compliance with postal service regulation 
on a mail piece {see column 8 line 65-9 line 11). 

26. As per claims 26-3 1, Whitehouse teaches a system wherein a bar code is printed on the 
value bearing item that is a ticket, is a coupon, is currency, a voucher, a traveler's check {see 
column 8 lines 14-18, 13 lines 56-60). 

27. As per claim 32, Whitehouse teaches a system wherein each security device transaction 
data includes one or more of an ascending register value, a descending register value, a 
respective cryptographic module ID, an indicium key certificate serial number, a licensing ZIP 
code, a key token for an indicium signing key, user secrets, a key for encrypting user secrets, 
date and time of last transaction, last challenge received from a respective client subsystem, an 
operational state of the respective module, expiration dates for keys, and a passphrase repetition 
list {see column 9 lines 12-67, 13 lines 20-36, 14 lines 25-55). 

28. As per claim 33, Whitehouse teaches a system wherein each security device transaction 
data includes one or more of a private key, a public key, and a public key certificate, wherein the 
private key is used to sign module status responses and a VBI which, in conjunction with a 
public key certificate, demonstrates that the module and the VBI are authentic {see column 9 
lines 12-50, 13 lines 20-36). 
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29. As per claim 34, Whitehouse teaches a system wherein the cryptographic module is 
capable of performing one or more of Ri vest, Shamir and Adleman (RSA) public key encryption, 
DES, Triple-DES, DSA signature, SHA-1, and Pseudo-random number generation algorithms 
{see column 23 lines 49-59). 

30. As per claim 35, Whitehouse teaches a system wherein the server system further 
comprises one or more of a postal server subsystem, a provider server subsystem, an e-commerce 
subsystem, a staging subsystem, a client support subsystem, a decision support subsystem, a 
SMTP subsystem, an address matching service subsystem, a SSL proxy server subsystem, and a 
web server subsystem {see figs 3 and 4). 

31. As per claim 36, Whitehouse teaches a system wherein the database includes one or more 
of a postal database, a provider database, an e-commerce database, and a membership database 
{see fig 3 4). 

32. As per claim 37, Whitehouse teaches a system further comprising an address matching 
server for verifying a correct address specified by a user {see column 12 line 65-13 line 15). 

33. As per claim 38, Whitehouse teaches a system further comprising a printer driver 
database for storing supported printer driver information {see figs 3 and 4). 
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34. As per claim 39, Whitehouse teaches a method for printing value-bearing items (VBI) 
{electronic distribution of postage, 100) via a communication network {network, fig 3) including 
a client system {host system, fig 3), and a scalable server system {postal service, 180) (see figs 3, 
4, column 7 line 54-8 line 11), the method comprising interfacing {communicating) with one or 
more users {customer, 104) via the client system {host system, fig 3) communicating with the 
client system over the communication networkfsee figs 3, 4, column 7 line 54-8 line 11), storing 
{storing) user information {user information) in a database {secure central computer 102, 
memory 154) accessible through the network {see fig 4, column 8 lines 23-29, 54-58), and storing 
in the database a plurality of security device transaction data for ensuring authenticity of the one 
or more users, wherein each security device transaction data can be processed in the server 
system {see figs 3, 4, column 8 line 59-65, 9 line 12-50). Whitehouse fails to teach authenticating 
the one more users using scalable cryptographic module. However, White teaches a system 
comprises authenticating the one more users using scalable cryptographic module in a stateless 
manner {see abstract, column 2 lines 18-54, 5 line 63-7 line 18). Therefore, it would have been 
obvious to one of ordinary skill in the art the invention was made to modify Whitehouse's 
system to include White's authenticating the one more users using scalable cryptographic 
module in a stateless manner because this would have enhance the security of the system. 

35. As per claim 40, Whitehouse teaches a method wherein each security device transaction 
data is related to a user {see column 9 lines 12-20). 
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36. As per claim 41, Whitehouse teaches a method further comprising of loading the security 
device transaction data related to a user into the cryptographic module when the user requests to 
operate value bearing item (see column 9 lines 45-50). 

37. As per claim 42, Whitehouse teaches a method further comprising of updating and 
returning the security device transaction data related to a user to the database (see column 9 line 
51-63, 12 line 53-56). 

38. As per claim 43, Whitehouse teaches a method further comprising adding at least one 
more stateless cryptographic module, wherein each cryptographic module is capable of 
processing any of the plurality of security device transaction data (see column 9 line 51-63). 

39. As per claim 44, Whitehouse teaches a method further comprising of authenticating a 
user using any of the cryptographic modules (see column 9 line 51-63). 

40. As per claim 45, Whitehouse teaches a method further comprising load-balancing to 
route user requests to the at least one more cryptographic module see column 19 line 35-20 line 
8). 



41 . As per claim 46, Whitehouse teaches a method further comprising load-balancing to 
distribute traffic among the multiple cryptographic modules see column 19 line 35-20 line 8). 
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42. As per claim 47, Whitehouse teaches a method further comprising authenticating any of 
the one or more users using the cryptographic module (see column 9 line 51-63). 

43. As per claim 48, Whitehouse teaches a method comprising partitioning the database 
across a plurality of physical databases (see fig 7). 

44. As per claim 49, Whitehouse teaches a method further comprising encrypting database 
transactions using the cryptographic module (see column 10 line 45-60). 

45. As per claim 50, Whitehouse teaches a method further comprising verifying a user 
password before granting access to the database (see column 15 line 1-17). 

46. As per claim 51, Whitehouse teaches a method further comprising storing one or more 
last database transactions in the database storing one or more last database transactions in the 
cryptographic module; and comparing the one or more last database transactions stored in the 
database with the one or more last database transactions stored in the cryptographic module to 
verify each database transaction (see column 16 line 45-67). 

47. As per claim 52, Whitehouse teaches a method further comprising encrypting 
transactions related to the database using the cryptographic module (see column 15 line 1-17). 
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48. As per claim 53, Whitehouse teaches a method further comprising storing one or more 
last database transactions in the database, storing one or more last database transactions in the 
cryptographic module for comparison with the one or more last database transactions stored in 
the database to verify each database transaction (see column 10 line 45-60). 

49. As per claim 54, Whitehouse teaches a method further comprising preventing further 
database transactions if the one or more last transaction stored in the cryptographic module does 
not compare with the one or more last transaction stored in the database (see column 8 line 63-9 
line 12). 

50. As per claim 55, Whitehouse teaches a method further comprising preventing 
unauthorized modification of data using the cryptographic module (see column 16 line 45-67). 

51. As per claim 56, Whitehouse teaches a method further comprising verifying that the 
database is up to date (see column 10 line 45-60). 

52. As per claim 57, Whitehouse teaches a method further comprising automatically re- 
synchronizing the cryptographic module with the database (see column 9 line 51-63). 

53. As per claim 58, Whitehouse teaches a method further comprising ensuring the proper 
operation of cryptographic security and VBI related meter functions (see column 9 lines 12-20). 
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54. As per claim 59, Whitehouse teaches a method further comprising supporting multiple 
concurrent operators (see fig 7). 

55. As per claim 60, Whitehouse teaches a method further comprising storing information 
about a number of last transactions in a respective internal register of each of the one or more 
cryptographic devices, storing a table including the information about a last transaction in the 
database, comparing the information saved in the respective device with the respective 
information saved in the database; and loading a new transaction data if the respective 
information stored in the device compares with the respective information stored in the database 
(see column 10 line 45-11 line 25). 

56. As per claim 61 , Whitehouse teaches a method further comprising the step of storing data 
for creating one or more indicium, account maintenance, and revenue protection (see column 10 
line 45-11 line 25). 

57. As per claims 62-65, Whitehouse teaches a method further comprising printing a mail 
piece includes a digital signature, a postage amount, an ascending register of used postage and 
descending register of available postage (see column 13 lines 20-40 t 14 line 25-36, 16 lines 19- 
38). 
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58. As per claims 66-71, Whitehouse teaches a method further comprising printing a ticket, a 
bar code, a coupon, currency, a voucher, a traveler's check (see column 7 line 46-53, 8 line 14- 
18, 13 lines 56-60). 

59. As per claim 72, Whitehouse teaches a method wherein the security device transaction 
data includes an ascending register value, a descending register value, a respective cryptographic 
device ID, an indicium key certificate serial number, a licensing ZIP code, a key token for an 
indicium signing key, user secrets, a key for encrypting user secrets, date and time of last 
transaction, last challenge received from a respective client subsystem, an operational state of the 
respective device, expiration dates for keys, and a passphrase repetition list (see column 13 lines 
20-40, 14 line 25-36, 16 lines 19-38). 

60. As per claim 73, Whitehouse teaches a method further comprising performing one or 
more of Rivest, Shamir and Adleman (RSA) public key encryption, DES, Triple-DES, DSA 
signature, SHA-1, and Pseudo-random number generation algorithms using each of the 
cryptographic devices (see 23 lines 49-59). 

61 . As per claim 74, Whitehouse teaches a method further comprising keeping track of user 
accesses to a vendor website using a website database (see fig 7). 

62. As per claim 75, Whitehouse teaches a method further comprising storing postal 
transaction data, financial transaction data, customer marketing information, commerce product 
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information, meter license information, meter resets, meter history, and meter movement 
information in an offline database {see column 10 line 45- 11 line 29). 

63. As per claim 76, Whitehouse teaches a method further comprising storing customer 
information, financial transactions, and information for marketing queries in a data warehouse 
database {see column 9 lines 12-31). 

64. As per claim 77, Whitehouse teaches a method further comprising authorizing and 
capturing funds from a customer's account and transferring the funds to a vendor's account using 
an e-commerce server {see column 11 line 60-67). 

65. As per claim 78, Whitehouse teaches a method further comprising verifying a correct 
address specified using a user using an address matching server {see column 9 line 51-63, 12 line 
53-56). 

66. As per claim 79, Whitehouse teaches a method further comprising storing supported 
printer driver information in a printer driver database {see figs 3 and 4). 

Response to Arguments 

67. Applicant's arguments filed April 13 th , 2006 have been fully considered but they are not 
persuasive. 
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a. Applicant argues that the prior art Whitehouse taken and in combination with 
White fail to teach an invention of authenticating the one more users using scalable 
cryptographic module. Applicants further argue that the suggestion to combine the 
references is not mentioned in either references and the inventions disclosed in 
Whitehouse and White are in different field. Examiner respectfully disagrees with 
Applicant characterization of the prior arts. White taken alone or in combination with 
Whitehouse teaches a systems and methods and computer program products for sharing 
state information between a stateless server and a stateful client are provided. A client 
request to perform an action on the server is accompanied by an encrypted token which 
contains state information. The server receiving the client request decrypts the token 
using a symmetric key generated from variable data. The server verifies that the received 
token is valid and uses the state information contained therein to perform the requested 
action. The server also provides clients with encrypted tokens using a symmetric key 
generated from variable data (see abstract). The fact that the stateless server is equipped 
with the ability to encrypted and decrypted yield the stateless server to be a cryptographic 
module. White further teach an operations for executing stateful client requests on a 
stateless server using an encrypted token containing state information. When a client 
requests an action to be performed by the server, a determination is made whether the 
request is accompanied by an encrypted token (Block 202). If the client request is not 
accompanied by an encrypted token, the server may perform any necessary steps required 
before execution of the action can occur. These steps are specific to the particular client- 
server application and may be as simple as assuming some default values for state before 
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performing the action or as complex as initiating an authentication sequence through 
dialog with the client . In response to applicant's argument that there is no suggestion to 
combine the references, the examiner recognizes that obviousness can only be established 
by combining or modifying the teachings of the prior art to produce the claimed invention 
where there is some teaching, suggestion, or motivation to do so found either in the 
references themselves or in the knowledge generally available to one of ordinary skill in 
the art. See In re Fine, 837 F.2d 1071, 5 USPQ2d 1596 (Fed. Cir. 1988)and In re Jones, 
958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). In this case, the invention disclosed in 
Whitehouse and White are in the same authentication environment and are therefore 
combinable. 

Conclusion 

68. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
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however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to FIRMN BACKER whose telephone number is 571-272-6703. 
The examiner can normally be reached on Monday - Thursday 9:00 AM - 5:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James Trammell can be reached on (571) 272-6712. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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